de960cf7ffaafb6e08957e55fc0ae093_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de960cf7ffaafb6e08957e55fc0ae093_JaffaCakes118
Size

209KB
MD5

de960cf7ffaafb6e08957e55fc0ae093
SHA1

f9641ade76ba5ed7c68d58e5c29de12acb8123bc
SHA256

93647f99924f6916064ea4ee3517a138d59adc3bd321b2561c8d5cbcea64be6c
SHA512

a5778af2d2044bcb38efbf4b2a3ad40c0f3c4ce7428b18b02be360f45f7a8ad91b526cfff417273154454e1c616bc0f4a652248d0d97faa4e05500442936b39d
SSDEEP

3072:bs6lkahg8Or1Uss2/NzOGN3WNlDj7/tu383AcpEu8oLIVTgcUS7HoYZGPkOzEo8U:bs6ProE2/hjNGRuuiu8TVTgJooY0SvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de960cf7ffaafb6e08957e55fc0ae093_JaffaCakes118

Files

de960cf7ffaafb6e08957e55fc0ae093_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ